CVE-2024-23342
python-ecdsa vulnerable to Minerva attack on P-256
The ecdsa PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
python-ecdsa vulnerable to Minerva attack on P-256
The ecdsa PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.
- Record
CVE-2024-23342- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-203, CWE-208, CWE-385
- Updated
- 2026-11-02
EUVDEUVD-2024-0448
The ecdsa PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.
- Record
EUVD-2024-0448- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-wj6h-64fc-37mp
Minerva timing attack on P-256 in python-ecdsa
python-ecdsa has been found to be subject to a Minerva timing attack on the P-256 curve. Using the ecdsa.SigningKey.sign_digest() API function and timing signatures an attacker can leak the internal nonce which may allow for private key discovery. Both ECDSA signatures, key generation, and ECDH operations are affected. ECDSA signature verification is unaffected. The python-ecdsa project considers side channel attacks out of scope for the project and there is no planned fix.
- Record
GHSA-wj6h-64fc-37mp- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-203, CWE-208, CWE-385
- Updated
- 2026-11-02
NVD
The ecdsa PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.
- Record
CVE-2024-23342- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-203, CWE-208, CWE-385
- Updated
- 2026-11-02
OSV
python-ecdsa vulnerable to Minerva attack on P-256
The ecdsa PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.
- Record
CVE-2024-23342- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-203, CWE-208, CWE-385
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-23342
The ecdsa PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.
- Record
DEBIAN-CVE-2024-23342- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
Show 5 moreShow less
OSVGHSA-wj6h-64fc-37mp
Minerva timing attack on P-256 in python-ecdsa
python-ecdsa has been found to be subject to a Minerva timing attack on the P-256 curve. Using the ecdsa.SigningKey.sign_digest() API function and timing signatures an attacker can leak the internal nonce which may allow for private key discovery. Both ECDSA signatures, key generation, and ECDH operations are affected. ECDSA signature verification is unaffected. The python-ecdsa project considers side channel attacks out of scope for the project and there is no planned fix.
- Record
GHSA-wj6h-64fc-37mp- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-203, CWE-208, CWE-385
- Updated
- 2026-11-02
OSVPYSEC-2026-1325
Minerva timing attack on P-256 in python-ecdsa
python-ecdsa has been found to be subject to a Minerva timing attack on the P-256 curve. Using the ecdsa.SigningKey.sign_digest() API function and timing signatures an attacker can leak the internal nonce which may allow for private key discovery. Both ECDSA signatures, key generation, and ECDH operations are affected. ECDSA signature verification is unaffected. The python-ecdsa project considers side channel attacks out of scope for the project and there is no planned fix.
- Record
PYSEC-2026-1325- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:10806
Red Hat Security Advisory: Satellite 6.15.5 Async Update
- Record
RHSA-2024:10806- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:1878
Red Hat Security Advisory: RHUI 4.8 Release - Security Updates, Bug Fixes, and Enhancements
- Record
RHSA-2024:1878- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-23342
The ecdsa PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.
- Record
UBUNTU-CVE-2024-23342- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ecdsaPyPI |
All versions | None known |
python-ecdsaDebian:12 |
All versions, plus listed versions 0.18.0-30.18.0-40.18.0-50.19.0-10.19.0-20.19.1-10.19.2-10.19.2-2 |
None known |
python-ecdsaDebian:13 |
All versions, plus listed versions 0.19.1-10.19.1-1+deb13u10.19.2-10.19.2-2 |
None known |
python-ecdsaDebian:14 |
All versions, plus listed versions 0.19.1-10.19.2-10.19.2-2 |
None known |
ecdsaPyPI |
All versions, plus listed versions 0.100.110.120.130.13.1 Show 18 moreShow less0.13.20.13.30.140.14.10.150.16.00.16.10.17.00.18.00.18.0b10.18.0b20.19.00.19.10.19.20.60.70.80.9 |
None known |
python-pulp-containerRed Hat:satellite_capsule:6.15::el8 From an advisory covering 5 CVEs |
before 0:2.16.9-2.el8pc | 0:2.16.9-2.el8pc |
python3.11-pulp-containerRed Hat:satellite_capsule:6.15::el8 From an advisory covering 5 CVEs |
before 0:2.16.9-2.el8pc | 0:2.16.9-2.el8pc |
python-pulp-containerRed Hat:satellite:6.15::el8 From an advisory covering 5 CVEs |
before 0:2.16.9-2.el8pc | 0:2.16.9-2.el8pc |
python3.11-pulp-containerRed Hat:satellite:6.15::el8 From an advisory covering 5 CVEs |
before 0:2.16.9-2.el8pc | 0:2.16.9-2.el8pc |
rubygem-rackRed Hat:satellite_capsule:6.15::el8 From an advisory covering 5 CVEs |
before 0:2.2.8.1-1.el8sat | 0:2.2.8.1-1.el8sat |
Show 24 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rubygem-rackRed Hat:satellite:6.15::el8 From an advisory covering 5 CVEs |
before 0:2.2.8.1-1.el8sat | 0:2.2.8.1-1.el8sat |
rubygem-activestorageRed Hat:satellite:6.15::el8 From an advisory covering 5 CVEs |
before 0:6.1.7.7-1.el8sat | 0:6.1.7.7-1.el8sat |
python-djangoRed Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:4.2.11-1.el8ui | 0:4.2.11-1.el8ui |
python3.11-djangoRed Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:4.2.11-1.el8ui | 0:4.2.11-1.el8ui |
python-aiohttpRed Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:3.9.2-1.el8ui | 0:3.9.2-1.el8ui |
python-aiohttp-debugsourceRed Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:3.9.2-1.el8ui | 0:3.9.2-1.el8ui |
python3.11-aiohttp-debuginfoRed Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:3.9.2-1.el8ui | 0:3.9.2-1.el8ui |
python3.11-aiohttpRed Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:3.9.2-1.el8ui | 0:3.9.2-1.el8ui |
python-cryptographyRed Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:41.0.6-1.el8ui | 0:41.0.6-1.el8ui |
python-cryptography-debugsourceRed Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:41.0.6-1.el8ui | 0:41.0.6-1.el8ui |
python3.11-cryptographyRed Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:41.0.6-1.el8ui | 0:41.0.6-1.el8ui |
python3.11-cryptography-debuginfoRed Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:41.0.6-1.el8ui | 0:41.0.6-1.el8ui |
python-jinja2Red Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:3.1.3-1.el8ui | 0:3.1.3-1.el8ui |
python3.11-jinja2Red Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:3.1.3-1.el8ui | 0:3.1.3-1.el8ui |
python-ecdsaRed Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:0.18.0-4.el8ui | 0:0.18.0-4.el8ui |
python3.11-ecdsaRed Hat:rhui:4::el8 From an advisory covering 14 CVEs |
before 0:0.18.0-4.el8ui | 0:0.18.0-4.el8ui |
python-ecdsaUbuntu:16.04:LTS |
All versions, plus listed versions 0.13-20.13-2ubuntu0.16.04.1 |
None known |
python-ecdsaUbuntu:18.04:LTS |
All versions, plus listed versions 0.13-20.13-2ubuntu0.18.04.1 |
None known |
python-ecdsaUbuntu:20.04:LTS |
All versions, plus listed versions 0.13.2-20.13.3-10.14.1-10.14.1-1ubuntu20.15-1 |
None known |
python-ecdsaUbuntu:22.04:LTS |
All versions, plus listed versions 0.16.1-10.18.0~b1-1 |
None known |
python-ecdsaUbuntu:24.04:LTS |
All versions, plus listed versions 0.18.0-30.18.0-40.18.0-5 |
None known |
python-ecdsaUbuntu:25.10 |
All versions, plus listed versions 0.19.1-1 |
None known |
python-ecdsaUbuntu:26.10 |
All versions, plus listed versions 0.19.1-10.19.2-1 |
None known |
python-ecdsaUbuntu:26.04:LTS |
All versions, plus listed versions 0.19.1-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-23342 is a high vulnerability (CVSS 7.4) in Tlsfuzzer Ecdsa, published January 22, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.98%, the 62nd percentile. No source names a fixed version.
References
github.com/tlsfuzzer/python-ecdsa/security/advisories/GHSA-wj6h-64fc-37mp
minerva.crocs.fi.muni.cz
securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python
nvd.nist.gov/vuln/detail/CVE-2024-23342
Show 116 moreShow less
security-tracker.debian.org/tracker/CVE-2024-23342
pypi.org/project/ecdsa
access.redhat.com/errata/RHSA-2024:10806
bugzilla.redhat.com/show_bug.cgi?id=2259780
issues.redhat.com/browse/SAT-28466
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10806.json
cve.org/CVERecord?id=CVE-2024-23342
discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941
djangoproject.com/weblog/2023/jul/03/security-releases
ubuntu.com/security/CVE-2024-23342